Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/4PWYJzFLE2aK2EnppYvU-q2XFOY.roa
File: 4PWYJzFLE2aK2EnppYvU-q2XFOY.roa (raw, json)
Hash identifier: f33gLiliUjw9+UyIBB1FbTny80dDA5WlmPfCkJepk4k=
Subject key identifier: E0:F5:98:27:31:4B:13:66:8A:D8:49:E9:A5:8B:D4:FA:AD:97:14:E6
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 01942521F0A739DD631F7079D43E5CA38FBB
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/4PWYJzFLE2aK2EnppYvU-q2XFOY.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 87.98.96.0/20 maxlen: 24
87.98.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f0:a7:39:dd:63:1f:70:79:d4:3e:5c:a3:8f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0f59827314b13668ad849e9a58bd4faad9714e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b7:ba:f1:1f:00:9b:94:b2:50:0b:99:6d:31:
61:c9:af:a7:b2:5a:c5:a1:10:2a:b0:39:c2:a0:f7:
f8:d3:1d:ed:92:99:95:43:f6:9f:8c:cb:8e:e6:1a:
65:31:42:e4:6f:47:89:b6:bc:71:ea:a0:b1:7e:ec:
1e:3b:43:c7:a7:0a:1c:a1:d5:e9:76:f4:6c:f1:e9:
d5:3c:5d:5b:d6:c5:32:1f:d7:ef:37:b0:3a:c6:af:
8d:13:48:e1:0a:38:0f:a3:3c:3b:78:de:b9:9c:ce:
2e:98:71:c6:ad:45:8a:05:2c:17:1a:f9:5f:ec:1f:
cc:d4:bf:6e:3c:43:b9:4c:69:01:fa:65:3f:74:6d:
cf:e3:af:46:32:23:09:ed:fe:2b:06:ab:f6:12:ce:
d1:27:eb:f7:55:96:6f:57:46:ec:7a:e6:b0:4c:5e:
90:ba:2f:30:13:d0:00:ad:c8:4c:1a:20:18:49:17:
46:75:9c:60:df:36:4f:92:15:e8:cf:ad:9d:65:c7:
6b:70:8c:63:8b:80:72:69:a2:3d:a8:23:c5:43:46:
e2:ac:dd:80:d2:20:69:8a:83:e8:bc:ae:f1:a2:61:
7e:23:ca:66:53:0f:45:c6:90:ee:64:e1:e9:3d:b0:
b2:7a:16:81:d2:d2:83:51:f1:96:8f:09:05:80:d1:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F5:98:27:31:4B:13:66:8A:D8:49:E9:A5:8B:D4:FA:AD:97:14:E6
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/4PWYJzFLE2aK2EnppYvU-q2XFOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.98.96.0-87.98.119.255
Signature Algorithm: sha256WithRSAEncryption
69:66:78:11:53:94:51:cd:75:54:f8:b3:5e:70:22:ba:c6:8c:
39:2a:4f:15:11:67:11:ee:d9:51:4f:cc:04:1a:51:56:06:d4:
b5:07:f7:0d:03:81:97:57:4f:00:d3:82:6e:ca:e0:06:c7:23:
3d:96:34:05:99:5c:98:88:15:05:61:20:32:76:3b:16:d2:a1:
45:05:94:38:dc:78:24:43:8e:ef:1b:1e:1c:ff:e6:65:68:5f:
2f:82:69:8f:60:6c:87:4b:0a:1b:49:c5:e5:4b:4f:4b:f5:de:
22:e0:7c:ad:7f:a2:a3:6e:2c:3e:8c:5e:33:4d:1a:d1:41:a0:
0c:13:fd:79:64:e6:7e:ee:79:c1:13:c7:2c:60:d2:d7:4f:e0:
57:ef:a3:97:2e:74:b6:96:ec:53:6e:7a:f2:32:f3:cd:83:84:
85:d5:ef:ee:d3:6c:70:38:fa:34:92:55:b4:b1:9d:e2:8c:ab:
43:4a:55:15:8f:ad:a2:8a:cf:19:24:bf:1b:da:c1:39:3f:3a:
bf:50:76:c7:04:4c:47:c2:f9:97:0d:26:bb:10:87:da:5d:6c:
b2:fd:57:4a:45:dc:52:72:84:c7:0c:69:51:8c:66:30:f8:e1:
d1:e7:5e:5a:37:a2:3c:a1:f4:65:0e:d8:20:6e:b7:ca:70:9e:
6c:94:0a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:16:57 2025 by rpki-client